NEAS[.]7232d97cb76df4c71c08963b2593b960[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7232d97cb76df4c71c08963b2593b960.exe
Size

119KB
MD5

7232d97cb76df4c71c08963b2593b960
SHA1

d2b5ce09d27128845438069b1cc7178faba93674
SHA256

c3e79f4b9a22ea6c2cd681c1a5946e8a99bc1acc6da9e32015696f95b06e107e
SHA512

45a4a00b5b8d963b4f724336935cbf1dfc8c3b908ddb60b7d60da909edef4af4a819bd9f02ca2fa173863baf102aa737f9a5b2003305a9cb01c96ee2b1de8240
SSDEEP

1536:op34Rear3hX/ZDGXQsG+H3ROmFa6coLbPw3Q5Ur/zVJOQ58LnGh99avIMa5UyAmJ:WIReaLDOv3R3Fa6Ffqret89xUOseS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7232d97cb76df4c71c08963b2593b960.exe

Files

NEAS.7232d97cb76df4c71c08963b2593b960.exe
.exe windows:4 windows x86

f5aab777032ee5e7f2ec662c4c37cfad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadpoolThreadMinimum
K32QueryWorkingSet
GetProductInfo
GetThreadSelectedCpuSets
InterlockedExchange
InitOnceExecuteOnce
GetAppContainerAce
FlsSetValue
EnumDateFormatsExA
BasepGetComputerNameFromNtPath

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE